Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 28 guests and 1 member online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
OSCP - Offensive Security Certified Professional
OSCP vs Hacking Dojo
EH-Net
May 23, 2013, 12:02:50 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
>
OSCP - Offensive Security Certified Professional
(Moderator:
don
) >
OSCP vs Hacking Dojo
Pages:
1
[
2
]
3
Go Down
« previous
next »
Print
Author
Topic: OSCP vs Hacking Dojo (Read 20421 times)
0 Members and 1 Guest are viewing this topic.
lorddicranius
Sr. Member
Offline
Posts: 447
Re: OSCP vs Hacking Dojo
«
Reply #15 on:
June 21, 2011, 03:25:53 PM »
Quote from: chrisj on June 21, 2011, 09:12:46 AM
Quote from: lorddicranius on June 20, 2011, 08:59:29 PM
Hacking Dojo provides you with vulnerable ISO's to work with. It requires you to either have an spare machine to use, or just use a virtual environment (VMWare Player/Workstation, VirtualBox, etc). I think most of us students have gone the virtual environment route.
My virtual environment is overloaded at the moment (runs on my laptop).
So I really do need a new box just for running the VM environment for a lab.
lol I know what you mean. My current "mobile lab" isn't beefy enough to run many VM's. I really do need another machine, too.
Logged
GSEC, eCPPT, Sec+
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #16 on:
June 21, 2011, 05:09:01 PM »
Quote from: chrisj on June 21, 2011, 01:20:36 PM
Quote from: El33tsamurai on June 21, 2011, 01:07:29 PM
A vm is just not as real as a real machine you know what I mean?
Actually, no. Not sure what you mean.
Considering everyone is consolidating to VM Systems, I think a VM is more real world like than not.
1) hosting sites are leveraging hardware costs by doing VMs
2) companies are doing the same in rented data centers by buying blades and moving to vms. Or buying pizza box servers and installing VMS
Cloud? Yep...
I'm reading the latest edition of Hacking Exposed: Web Applications (3rd edition), and it talks about people using VMs too. My examples I listed above though were from personal experience.
1) VM's take away the ability to allow you to hack wireless.
2) VM's there are no routers or switches to go through.
3) Its a Fake network.
Yes everyone is going VM's but in your fake VM lab you don't have what I have stated above which are huge parts of businesses.
If you look at me have a laptop that can hold alot but no switch's, router's, extra so having something like that available to practice I feel is more real word. Does this make more sense when I say you know what I mean?
Logged
CCENT, A+, Network+, Security+
lorddicranius
Sr. Member
Offline
Posts: 447
Re: OSCP vs Hacking Dojo
«
Reply #17 on:
June 21, 2011, 07:19:19 PM »
Quote from: El33tsamurai on June 21, 2011, 05:09:01 PM
Quote from: chrisj on June 21, 2011, 01:20:36 PM
Quote from: El33tsamurai on June 21, 2011, 01:07:29 PM
A vm is just not as real as a real machine you know what I mean?
Actually, no. Not sure what you mean.
Considering everyone is consolidating to VM Systems, I think a VM is more real world like than not.
1) hosting sites are leveraging hardware costs by doing VMs
2) companies are doing the same in rented data centers by buying blades and moving to vms. Or buying pizza box servers and installing VMS
Cloud? Yep...
I'm reading the latest edition of Hacking Exposed: Web Applications (3rd edition), and it talks about people using VMs too. My examples I listed above though were from personal experience.
1) VM's take away the ability to allow you to hack wireless.
2) VM's there are no routers or switches to go through.
3) Its a Fake network.
Yes everyone is going VM's but in your fake VM lab you don't have what I have stated above which are huge parts of businesses.
If you look at me have a laptop that can hold alot but no switch's, router's, extra so having something like that available to practice I feel is more real word. Does this make more sense when I say you know what I mean?
But now you're going beyond the scope of what a "virtual machine" is/does. It's called a "virtual machine," not a "virtual network." That's not to say though that you can't create a "virtual network" on a single machine though. I ran across a blog post not too long ago where a guy used pfSense as a router between two separate virtual networks, all hosted on a single laptop. While it's not Cisco IOS firmware, etc in your virtual network, you do have the ability to mess with firewall rules, routes, etc all on a single machine using a virtual network.
As for wireless, I haven't tried to mess with that using only one machine. I personally use a laptop hosting a BackTrack VM with an Alfa wireless card connected as my attack machine, a WRT54GL for my WAP, and my phone or iPod as the client (which probably isn't more than what any other infosec pro/hobbyist/enthusiast already has). I do wonder though if I might be able to use the built-in wireless card/host OS as the client...then it'd all be contained on one laptop, aside from the WAP. Gonna have to try that soon.
«
Last Edit: June 21, 2011, 07:36:14 PM by lorddicranius
»
Logged
GSEC, eCPPT, Sec+
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #18 on:
June 21, 2011, 07:21:14 PM »
But the subject at hand here had to do with a at home lab but this is going no where I am sorry should of been more specific.
Logged
CCENT, A+, Network+, Security+
lorddicranius
Sr. Member
Offline
Posts: 447
Re: OSCP vs Hacking Dojo
«
Reply #19 on:
June 21, 2011, 07:45:05 PM »
True, but was regarding a home lab for Hacking Dojo and/or the PWB course. I know VM's work fine for Hacking Dojo and from what I've heard, you aren't hacking switches/routers in PWB, just other virtual machines (hosted by Offensive Security).
Just making sure we're all on the same page
Logged
GSEC, eCPPT, Sec+
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #20 on:
June 21, 2011, 07:50:55 PM »
Ok, from the diagrams I saw online there was some sort of firewall that you had to get through I just assumed it was some sort of router.
Logged
CCENT, A+, Network+, Security+
tturner
Sr. Member
Offline
Posts: 432
Re: OSCP vs Hacking Dojo
«
Reply #21 on:
June 22, 2011, 09:28:32 AM »
Quote from: El33tsamurai on June 21, 2011, 05:09:01 PM
1) VM's take away the ability to allow you to hack wireless.
2) VM's there are no routers or switches to go through.
3) Its a Fake network.
Yes everyone is going VM's but in your fake VM lab you don't have what I have stated above which are huge parts of businesses.
If you look at me have a laptop that can hold alot but no switch's, router's, extra so having something like that available to practice I feel is more real word. Does this make more sense when I say you know what I mean?
1 - VMs allow direct access to USB attached devices, including USB wireless adapters. I can hack wireless all day from within a VM.
2 - take a look at GNS3, my virtual lab includes routers running Cisco IOS, switch modules on those routers and also the generic switches that come with GNS3. I have also recently connected my virtual environment to some real world physical switches and it works flawlessly.
3 - Why is it fake? What determines real or not? I'm still sending and receiving packets. It really depends on how you configure your environment. I can include physical devices if I wish to, or keep it isolated or anything in between. It's the flexibility with the click of a button that is so powerful. The main downside is that the VM environment is not natively identical to your real world environment, but if it gets you 95% of the way (or closer) there for 5% of the cost then that's a no-brainer to me. Don't throw the baby out with the bathwater.
That being said, there ARE instances where running in a VM can cause problems, like for VM aware malware that changes characteristics based on whether it's running in a VM or not. This is usually to counter RE tactics. Snapshots are godly!
Logged
Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP
WIP: OSWP, GSSP-JAVA, GXPN
Udacity on hold, again. I suck.
http://sentinel24.com/blog
@tonylturner
http://bsidesorlando.org
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #22 on:
June 22, 2011, 10:33:16 AM »
Quote from: tturner on June 22, 2011, 09:28:32 AM
Quote from: El33tsamurai on June 21, 2011, 05:09:01 PM
1) VM's take away the ability to allow you to hack wireless.
2) VM's there are no routers or switches to go through.
3) Its a Fake network.
Yes everyone is going VM's but in your fake VM lab you don't have what I have stated above which are huge parts of businesses.
If you look at me have a laptop that can hold alot but no switch's, router's, extra so having something like that available to practice I feel is more real word. Does this make more sense when I say you know what I mean?
1 - VMs allow direct access to USB attached devices, including USB wireless adapters. I can hack wireless all day from within a VM.
2 - take a look at GNS3, my virtual lab includes routers running Cisco IOS, switch modules on those routers and also the generic switches that come with GNS3. I have also recently connected my virtual environment to some real world physical switches and it works flawlessly.
3 - Why is it fake? What determines real or not? I'm still sending and receiving packets. It really depends on how you configure your environment. I can include physical devices if I wish to, or keep it isolated or anything in between. It's the flexibility with the click of a button that is so powerful. The main downside is that the VM environment is not natively identical to your real world environment, but if it gets you 95% of the way (or closer) there for 5% of the cost then that's a no-brainer to me. Don't throw the baby out with the bathwater.
That being said, there ARE instances where running in a VM can cause problems, like for VM aware malware that changes characteristics based on whether it's running in a VM or not. This is usually to counter RE tactics. Snapshots are godly!
In the VM it does not show up as a wireless device it comes through the host machine and it shows up as a Ethernet card not wireless device.
So with GNS3 you are able to use your vms in the environment as well? This looks cool I have been using Packet Tracer to practice for my Cisco certs.
Yeah I agree on point three but it was designed by you making a hacking challenge 100% easier because you know all the configs of all the devices this is the major draw back here.
I agree snap shots are amazing.
Logged
CCENT, A+, Network+, Security+
cd1zz
Hero Member
Offline
Posts: 561
Re: OSCP vs Hacking Dojo
«
Reply #23 on:
June 22, 2011, 10:47:48 AM »
El33tsamurai
That is why you should do OSCP! Because you don't know any of that!
Logged
OSCE | OSCP | GXPN | OSWP | CISSP
http://www.pwnag3.com
http://www.networkadminsecrets.com
lorddicranius
Sr. Member
Offline
Posts: 447
Re: OSCP vs Hacking Dojo
«
Reply #24 on:
June 22, 2011, 11:14:08 AM »
Quote from: El33tsamurai on June 22, 2011, 10:33:16 AM
In the VM it does not show up as a wireless device it comes through the host machine and it shows up as a Ethernet card not wireless device.
I'm not sure I understand what you mean. My Alfa USB wireless device shows up as wlan0 on a BackTrack VM. I can then see all the wireless stats via "iwconfig" also.
Logged
GSEC, eCPPT, Sec+
chrisj
Hero Member
Offline
Posts: 1163
Re: OSCP vs Hacking Dojo
«
Reply #25 on:
June 22, 2011, 12:30:20 PM »
It's not easy, but you can set up wireless to the VM. It's how you pass the device to it. With the Alfa cards, you can pass it as a usb device.
Anyway... The VMs have the following options. Host only (you have to be on the VM Server), natted, bridged. Most of mine are bridged.
The point of a VM lab over a hardware lab is that you can rebuild faster, and not be limited by 1 box to 1 system.
Example my full lab:
WRT54GL
2 Alfa wireless cards (USB)
3 Pentium 3 desktop. Each one running a different version of linux
1 Laptop running 5 Virtual guests in bridged mode (base is debian, vms are: Backtrack, Fedora, 2 WinXP, Ubuntu)
1 triple boot netbook (win7, ubuntu, backtrack)
3 cisco routers
3 cisco swtiches
I use the laptop and netbook as day to day boxes, and want a new desktop to run the VMs on, as well as add to being a day to day box at home.
Logged
OSWP, Sec+
jsm725
Newbie
Offline
Posts: 36
Re: OSCP vs Hacking Dojo
«
Reply #26 on:
June 22, 2011, 12:34:38 PM »
Sounds like El33tsamurai has the USB card on the host and not mounted directly to the VM. I just took the OSWP training using a virtual image and an Alpha card. It shows up (when mounted directly to the VM) as wlan0.
Also, definitely look into GNS3. A seriously awesome tool.
Logged
CISSP, PCI-QSA, OSWP
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #27 on:
June 23, 2011, 05:07:51 PM »
Quote from: cd1zz on June 22, 2011, 10:47:48 AM
El33tsamurai
That is why you should do OSCP! Because you don't know any of that!
Good call I am putting money together to get working on this.
Logged
CCENT, A+, Network+, Security+
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #28 on:
June 23, 2011, 05:08:45 PM »
Quote from: lorddicranius on June 22, 2011, 11:14:08 AM
Quote from: El33tsamurai on June 22, 2011, 10:33:16 AM
In the VM it does not show up as a wireless device it comes through the host machine and it shows up as a Ethernet card not wireless device.
I'm not sure I understand what you mean. My Alfa USB wireless device shows up as wlan0 on a BackTrack VM. I can then see all the wireless stats via "iwconfig" also.
See my wireless does not.
Logged
CCENT, A+, Network+, Security+
El33tsamurai
Full Member
Offline
Posts: 192
Re: OSCP vs Hacking Dojo
«
Reply #29 on:
June 23, 2011, 05:11:00 PM »
Quote from: jsm725 on June 22, 2011, 12:34:38 PM
Sounds like El33tsamurai has the USB card on the host and not mounted directly to the VM. I just took the OSWP training using a virtual image and an Alpha card. It shows up (when mounted directly to the VM) as wlan0.
Also, definitely look into GNS3. A seriously awesome tool.
I have added and will use it thanks alot.
Logged
CCENT, A+, Network+, Security+
Pages:
1
[
2
]
3
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Calendar Of Events
: HITBSecConf2013 – Amsterdam
(7) by
hekvvddtest
General Certification
: Direction
(5) by
hekvvddtest
Hardware
: Discreet Hacking Devices
(8) by
hekvvddtest
Calendar Of Events
: CanSecWest 2013
(5) by
hekvvddtest
Forensics
: Burn Note
(5) by
hekvvddtest
Greetings
: Obtain The Scoop On mulberry bags Before You Are Too Late
(11) by
hekvvddtest
Greetings
: Good day ...
(6) by
hekvvddtest
General Certification
: nth topic on Career Advice
(8) by
hekvvddtest
Calendar Of Events
: Cyber Readiness Challenge - Rome
(1) by
hekvvddtest
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(0) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(0) by
prats84
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Greetings
: Hi from the UK
(2) by
n37sh@rk
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(0) by
SUdoctstudent
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
Web Applications
: Nessus and Nikto
(4) by
Seen
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.